Skip to content

Support for gitlab-token in VS Code Plugin for Secure Token Management #211

Open

Description

@Anselmoo

Summary

Add support for .pypirc files in the 1Password VS Code plugin to securely manage tokens and prevent accidental public uploads.

Use cases

The feature would help users securely store and manage their tokens in .pypirc files, reducing the risk of uploading sensitive information to public repositories. It would be particularly useful for developers who frequently publish packages to platforms such as GitLab package registry, PyPI, and GitHub environment.

Proposed solution

Implement support for .pypirc files in the 1Password VS Code plugin. This would involve recognizing and properly handling .pypirc files, allowing users to easily set up and manage their tokens for various platforms.

Is there a workaround to accomplish this today?

Currently, there is no straightforward workaround. Users must manually manage their tokens, which increases the risk of accidental public uploads.

References & Prior Work

Activity

  1. Anselmoo commented on Feb 15, 2025

    @Anselmoo
    Author
    [distutils]
    index-servers =
        first-repository
        second-repository
    
    [first-repository]
    repository = "<first-repository URL>"
    username = "<first-repository username>"
    password = "<first-repository password>"
    
    [second-repository]
    repository = "<second-repository URL>"
    username = "<second-repository username>"
    password = "<second-repository password>"

    Source: https://packaging.python.org/en/latest/specifications/pypirc/

  2. changed the title [-]Support for `.pypirc` in VS Code Plugin for Secure Token Management[/-] [+]Support for `gitlab-token` in VS Code Plugin for Secure Token Management[/+] on Feb 25, 2025
  3. Anselmoo commented on Feb 25, 2025

    @Anselmoo
    Author

    Actually, it appears that GitLab tokens are not yet included. GitHub tokens will be recognized in .pypirc.

    https://github.com/1Password/op-vscode/blob/54ce1a7a09efbe64faf7dd63f29522f4f9bb1a0b/src/secret-detection/patterns.ts#L163C2-L169C4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions